CVE-2011-5325: Path Traversal
A path traversal vulnerability was found in Busybox implementation of tar. tar will extract a symlink that points outside of the current working directory and then follow that symlink when extracting other files. This allows for a directory traversal attack when extracting untrusted tarballs.
Reproducer:
http://git.busybox.net/busybox/commit/?id=a116552869db5e7793ae10968eb3c962c69b3d8c
CVE assignment:
http://seclists.org/oss-sec/2015/q4/121
Other sources
Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2011-5325.
What is the severity of CVE-2011-5325?
The severity of CVE-2011-5325 is high with a CVSS score of 7.5.
How does CVE-2011-5325 work?
CVE-2011-5325 is a directory traversal vulnerability in the BusyBox implementation of tar before version 1.22.0 v5. It allows remote attackers to point to files outside the current working directory via a symlink.
Which software is affected by CVE-2011-5325?
The following software versions are affected by CVE-2011-5325: BusyBox before 1.22.0 v5, Debian Linux 8.0 and 9.0, and Canonical Ubuntu Linux 16.04, 18.04, 18.10, and 14.04.
How can I fix CVE-2011-5325?
To fix CVE-2011-5325, update BusyBox to version 1.22.0 v5 or later. For Debian Linux and Canonical Ubuntu Linux, update to the recommended versions specified in the remedy section of the affected software.